Your Application              Citadel                         Database
       |                         |                               |
       |-- POST /encrypt ------->|                               |
       |                         |-- hybrid KEM (X25519+ML-KEM)  |
       |                         |-- derive AES-256 key (HKDF)   |
       |                         |-- encrypt with AES-256-GCM    |
       |<-- encrypted blob ------|                               |
       |                                                         |
       |-- store blob ------------------------------------------>|

citadel-envelope    混合加密核心（X25519 + ML-KEM-768 + AES-256-GCM）
citadel-keystore    密钥生命周期管理，4级层次结构，威胁自适应策略
citadel-api         HTTP 服务器，作用域 API 密钥认证，速率限制，实时仪表板

# 克隆
git clone https://github.com/mrcord77/rust_citadel.git
cd rust_citadel

# 设置您的管理员 API 密钥
echo -n "your-secret-key" | sha256sum | cut -d' ' -f1
# 复制哈希值

# 启动
CITADEL_API_KEY_HASH=<粘贴哈希值> docker compose up -d

# 验证
curl http://localhost:3000/health
# {"status":"ok","version":"0.2.0"}

cargo build --release -p citadel-api
CITADEL_API_KEY="your-secret-key" CITADEL_SEED_DEMO=true ./target/release/citadel-api

import requests

api = "http://localhost:3000"
headers = {"Authorization": "Bearer your-secret-key"}

# 加密
r = requests.post(f"{api}/api/keys/{dek_id}/encrypt", headers=headers, json={
    "plaintext": "sensitive data",
    "aad": "record-001",        # 将密文绑定到此记录
    "context": "patient-records" # 域分离
})
blob = r.json()

# 解密
r = requests.post(f"{api}/api/decrypt", headers=headers, json={
    "blob": blob,
    "aad": "record-001",
    "context": "patient-records"
})
plaintext = r.json()["plaintext"]

# 状态
curl http://localhost:3000/api/status -H "Authorization: Bearer $KEY"

# 列出密钥
curl http://localhost:3000/api/keys -H "Authorization: Bearer $KEY"

# 加密
curl -X POST http://localhost:3000/api/keys/$DEK_ID/encrypt \
  -H "Authorization: Bearer $KEY" \
  -H "Content-Type: application/json" \
  -d '{"plaintext":"hello","aad":"test","context":"demo"}'

Root Key
  └── Domain Key (per environment / business unit)
        └── KEK — Key Encrypting Key (wraps DEKs)
              └── DEK — Data Encrypting Key (encrypts application data)

version[1] || suite_kem[1] || suite_aead[1] || flags[1] || kem_ct_len[2] ||
x25519_ephemeral_pk[32] || mlkem768_ct[1088] || nonce[12] || aead_ct[variable]

rust_citadel/
├── citadel-envelope/        # 核心混合加密库
│   ├── src/
│   │   ├── envelope.rs      # 加密/解密操作
│   │   ├── kem.rs           # X25519 + ML-KEM-768 混合 KEM
│   │   ├── kdf.rs           # HKDF-SHA256 密钥派生
│   │   ├── wire.rs          # 线格式编码/解码
│   │   ├── aead.rs          # AES-256-GCM 包装器
│   │   ├── aad.rs           # 额外的认证数据
│   │   ├── error.rs         # 统一错误类型
│   │   └── sdk.rs           # 高级 API
│   ├── tests/               # KAT + 往返测试
│   └── fuzz/                # 模糊测试目标
├── citadel-keystore/        # 密钥生命周期管理
│   └── src/
│       ├── keystore.rs      # 密钥 CRUD + 状态机
│       ├── policy.rs        # 加密周期策略
│       ├── threat.rs        # 自适应威胁情报
│       ├── storage.rs       # 基于文件的密钥存储
│       ├── audit.rs         # 完整性链审计日志
│       └── types.rs         # 密钥类型和状态
├── citadel-api/             # HTTP 服务器
│   └── src/
│       ├── main.rs          # API 路由、认证、速率限制
│       └── dashboard.html   # 实时安全仪表板
├── citadel_example.py       # Python 集成示例
├── Backup-Citadel.ps1       # 备份/恢复工具
├── docker-compose.yml       # 开发部署
├── docker-compose-production.yml  # 生产环境（带 TLS）
├── SPEC.md                  # 线格式规范
├── THREAT_MODEL.md          # 安全目标和攻击者模型
├── COMPLIANCE_MATRIX.md     # NIST 800-57 控制映射
└── CITADEL_OVERVIEW.md      # 商业概述